Things I build, break, fix, and write about

5 November 2026
Embedded payloads in trojanised PDF viewers

Modified PDF viewers are a neat little delivery trick because they look like ordinary job bait until someone opens them. I keep coming back to the same point, the file name is not the danger, the loader path is; that is where the unwanted code slips in.

5 November 2026
Ransomware group fragmentation and detection priorities

Ransomware group fragmentation means the label matters less than the behaviour, and I trust activity over reputation every time. A small crew with...

5 November 2026
Security Advisory – 05 Nov 2026

Daily security advisory summary for 05 Nov 2026

4 November 2026
Linux kernel net/sched UAF constraints on CentOS 9 desktop

Linux kernel net/sched use-after-free looks messy on paper, and on CentOS 9 Desktop it is worse, because the obvious paths are blocked and the useful...

Latest blog posts you might like

19 March 2026
n8n | stable

n8n 2.12.3: patch fixes leader takeover event emission on mismatch, restores editor command bar workflow search, recommended upgrade

16 March 2026
Object storage encryption at rest in homelab setups

Encryption without object lock is a half-measure. A misconfigured script or compromised service account can still wipe everything, which is why S3-compatible storage on a homelab needs layered defence...

16 March 2026
Ring Outdoor Camera Battery + 2 more Amazon tech bargains

Discover the Ring Outdoor Camera Battery and two more Amazon tech deals this week.

16 March 2026
Document what your backup excludes, not just what it covers

I've built backup jobs that looked fine right up until the restore failed. The gap between what you think is covered and what actually is covered lives in the space where documentation should be;...

16 March 2026
Docker Compose for portable homelab deployments

Vendor lock-in creeps in quietly: a pinned cloud dashboard, a backup tool in a proprietary format, a reverse proxy config hardcoded to an IP nobody wrote down. By the time you need to migrate, the...

15 March 2026
Mitigating Win+X paste attacks with PowerShell settings

Use this blueprint to harden Windows Terminal and PowerShell, reduce exposure and detect post-compromise behaviour. You get clear settings, AppLocker and WDAC guidance, logging checks and audits you...

10 March 2026
Amazon Fire TV Stick 4K Max + 3 more Amazon tech bargains

Discover the Amazon Fire TV Stick 4K Max and three more tech deals for your home.

10 March 2026
Assessing surveillance risks with Microsoft AI tools

Explore the critical landscape of data privacy and compliance in surveillance, focusing on lessons from Microsoft and ICE's increasing data utilisation.

8 March 2026
Fraudulent accounts and proxy services in AI compliance

Navigating the complex landscape of AI compliance is essential. This guide explores lessons from the Anthropic allegations, highlighting key strategies to protect AI systems and data integrity.

3 March 2026
Security Advisory – 03 Mar 2026

Daily security advisory summary for 03 Mar 2026